PT-2026-70484

Name of the Vulnerable Software and Affected Versions User-Mode Power Service UMPS affected versions not specified Description Insufficient granularity of access control in the User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-70767

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

PT-2026-70405

Name of the Vulnerable Software and Affected Versions Virtual Hard Disk VHD Miniport Driver affected versions not specified Description A use-after-free issue exists in the Virtual Hard Disk VHD Miniport Driver. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-70681

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A heap-based buffer overflow occurs in the Desktop Window Manager, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-70545

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

PT-2026-70720

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-70438

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose sensitive information locally and affect the system. A heap-based buffer overflow occurs when...

VulnCheck KEV: CVE-2026-68820

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

PT-2026-70596

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An uncaught exception in .NET allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

UBUNTU-CVE-2026-63622

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

CVE-2026-21074

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...

EUVD-2026-54958

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfyuploadimage. Such manipulation of the argument imagepath leads to path traversal. An attack has to be approached locally. The project...

CVE-2026-19381 Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

PT-2026-69402

Name of the Vulnerable Software and Affected Versions Bixby versions prior to 4.0.86.0 Description Incorrect default permissions allow local attackers to execute arbitrary commands with Bixby privilege. Recommendations Update Bixby to version 4.0.86.0 or later...

PT-2026-69393

Name of the Vulnerable Software and Affected Versions libcodec2secqcelpdec.so versions prior to SMR Aug-2026 Release 1 Description An out-of-bounds write exists in the libcodec2secqcelpdec.so library, which allows local attackers to write data beyond the allocated memory boundaries. Recommendatio...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0745

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0745. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Mariadb PHSA-2025-5.0-91-0722

An update of the mariadb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0722. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Sudo PHSA-2025-5.0-92-0544

An update of the sudo package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0544. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-68252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/sdma7.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit...